blueteamsec

673 readers

15 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

551

7

Malicious Chrome Extension Steals Meta Business Manager Exports and TOTP 2FA Seeds (socket.dev)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

552

1

Hunting Queriesqne Detection Rules for Defender for Office365 using Teams MDO Advanced Hunting tables (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

553

1

How Coinbase Safeguards PII Using MPC Encryption (www.coinbase.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

554

0

Jailbreaking Leaves a Trace: Understanding and Detecting Jailbreak Attacks from Internal Representations of Large Language Models (arxiv.org)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

555

4

CIC-Trap4Phish: A Unified Multi-Format Dataset for Phishing and Quishing Attachment Detection (arxiv.org)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

556

-5

JoySafeter isn't just a productivity tool, but an "operating system" for security capabilities. It unifies fragmented security tools into a collaborative AI army through visual intelligent orchestrati (github.com)

submitted 1 month ago by digicat to c/blueteamsec

4 comments fedilink

557

-2

JD.com has open-sourced its large-scale model security framework—JoySafety (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

558

4

ClickOnceBlobber: ClickOnce AppDomainManager Injection Toolkit (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

559

5

LazyDLLSideload: Generate DLL proxy/sideload projects. Automatically parses PE export tables and generates ready-to-compile project for red team engagements. (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

560

4

BSOD_bitlocker_recover: Python script for carving Bitlocker VMK keys (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

561

1

Breaking eBPF Security: How Kernel Rootkits Blind Observability Tools (matheuzsecurity.github.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

562

1

Hunting Kerberos: Decode TGT TicketOptions with KQL (blog.nviso.eu)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

563

16

Manipulating AI memory for profit: The rise of AI Recommendation Poisoning (www.microsoft.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

564

12

Romania’s Oil Pipeline Operator Hacked: How an Infostealer Infection Paved the Way for Qilin's Ransomware Attack (www.infostealers.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

565

1

How to OTel: A blueprint for OpenTelemetry adoption (www.elastic.co)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

566

1

Tech impersonators: ClickFix and MacOS infostealers (securitylabs.datadoghq.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

567

4

Threat Campaign Targeting BeyondTrust Remote Support Following CVE-2026-1731 PoC Availability (arcticwolf.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

568

5

Cyber Threat Intelligence Framework (www.cert.europa.eu)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

569

1

yt-media-storage: Stores files onto YouTube by encoding them into lossless video and decoding them back to the original file. Supports both a command-line interface and a graphical user interface. (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

570

1

Huginn is a position-independent COFF loader designed for in-memory execution with built-in stack spoofing, indirect syscalls and automatic heap cleanup to prevent memory leaks (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

571

1

tuxid: A lightweight Linux fingerprinting tool - A lightweight POSIX-compliant shell script that collects hardware, system, and network signals to generate a unique, reproducible fingerprint (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

572

1

VK Styles: 500K Users Infected by Chrome Extensions That Hijack VKontakte Accounts (www.koi.ai)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

573

2

Distillation, Experimentation, and (Continued) Integration of AI for Adversarial Use (cloud.google.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

574

1

Reconnaissance Has Begun for the New BeyondTrust RCE (CVE-2026-1731): Here's What We See So Far (www.greynoise.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

575

1

Attackers Weaponize Signed RMM Tools via Zoom, Meet, & Teams Lures (www.netskope.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink